Externalize role

tasks/main.yml

@@ -0,0 +1,27 @@
+---
+- name: Include vars for {{ ansible_os_family }}
+  include_vars: "{{ ansible_os_family }}.yml"
+
+- name: Install packages for fail2ban
+  package: name="{{ fail2ban_packages }}" state=latest update_cache=yes
+
+- name: Test if paths overrides file exist
+  stat: path=/etc/fail2ban/paths-overrides.local
+  register: pathsoverrides
+
+- name: Touch the standard log file
+  file: path=/etc/fail2ban/paths-overrides.local state=touch owner=root group=root mode=0640
+  when:
+    - not pathsoverrides.stat.exists
+
+- name: Install fail2ban configuration files
+  template: src="{{ item }}.j2" dest="/{{ item }}" owner=root group=root mode=0644
+  with_items:
+    - etc/fail2ban/jail.local
+    - etc/fail2ban/jail.d/02-services.conf
+  notify: Restart fail2ban
+
+- name: Enable fail2ban services
+  service: name="fail2ban" enabled=yes
+
+